Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/PU0hNxhZ9gnygWHqNr07qXkxc94.roa
File: PU0hNxhZ9gnygWHqNr07qXkxc94.roa (raw, json)
Hash identifier: wzZfk5io+9qbaGJN9m6CkPiNg3q3eNTUNIPd7O5ekZA=
Subject key identifier: 3D:4D:21:37:18:59:F6:09:F2:81:61:EA:36:BD:3B:A9:79:31:73:DE
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01942445506361B62AF597F8F232DF4C079A
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/PU0hNxhZ9gnygWHqNr07qXkxc94.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49800
IP address blocks: 5.63.160.0/21 maxlen: 21
5.63.160.0/24 maxlen: 24
31.47.192.0/21 maxlen: 21
37.186.64.0/18 maxlen: 18
46.19.96.0/21 maxlen: 21
62.89.0.0/19 maxlen: 19
78.109.64.0/20 maxlen: 20
93.185.32.0/20 maxlen: 20
130.193.120.0/21 maxlen: 21
185.8.0.0/22 maxlen: 22
185.8.2.0/24 maxlen: 24
195.250.64.0/19 maxlen: 19
2a02:2a50::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:50:63:61:b6:2a:f5:97:f8:f2:32:df:4c:07:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d4d21371859f609f28161ea36bd3ba9793173de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:ea:c1:75:01:a2:09:35:26:12:a3:60:32:
dc:e6:47:75:e2:6c:e3:e1:d2:1b:4a:7f:37:15:46:
8c:f8:8d:93:1c:86:9e:ce:43:54:1c:e4:80:77:7c:
42:96:57:5e:99:7d:06:2b:77:f7:0a:25:f5:b9:af:
aa:f1:63:df:62:cc:89:85:8d:16:5d:46:60:9b:e1:
49:96:f4:a0:9a:6a:b9:e4:a5:37:3d:18:33:24:9d:
40:28:f3:97:6e:73:e2:64:d5:11:1a:09:5d:a9:08:
ce:51:f2:a5:ba:7b:42:64:dd:6f:ad:5e:44:93:88:
13:a4:30:51:04:32:d4:9b:20:50:74:6c:7b:f7:82:
16:74:c5:61:dd:a8:95:8c:fb:dc:1c:85:f8:82:41:
70:b8:62:7a:59:fc:d0:7b:3c:6a:12:61:3f:48:5b:
f5:6d:89:69:1a:4f:f6:11:95:ee:55:42:5c:cd:e4:
ea:77:ab:e7:86:61:87:a4:e3:69:0d:8e:19:e9:ba:
78:e3:be:45:e1:19:4b:a9:39:38:e9:b9:82:1e:9b:
99:93:90:44:4c:6e:7c:e6:d2:1e:e0:29:38:35:99:
87:d9:d7:c9:37:b7:b1:57:74:5b:ee:77:6f:f9:81:
eb:68:7c:3e:61:5c:f1:29:5c:fa:e8:d3:02:61:44:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:21:37:18:59:F6:09:F2:81:61:EA:36:BD:3B:A9:79:31:73:DE
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/PU0hNxhZ9gnygWHqNr07qXkxc94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.160.0/21
31.47.192.0/21
37.186.64.0/18
46.19.96.0/21
62.89.0.0/19
78.109.64.0/20
93.185.32.0/20
130.193.120.0/21
185.8.0.0/22
195.250.64.0/19
IPv6:
2a02:2a50::/29
Signature Algorithm: sha256WithRSAEncryption
95:56:c6:a0:3e:ea:72:ab:17:d0:d9:f3:bf:69:b4:fb:31:66:
26:c8:81:16:72:15:1a:32:bf:98:09:00:7c:4b:e5:67:cc:5a:
37:69:e8:bb:ec:d1:70:25:06:5a:85:19:5f:3c:9e:fe:03:dd:
7e:62:e5:95:d4:29:16:07:9d:c1:c6:15:ea:86:f0:1d:d5:38:
b9:76:f9:53:93:4e:9f:9b:6e:26:06:49:62:26:e6:c5:d9:be:
83:1e:04:aa:80:97:69:c0:76:73:6b:57:4b:69:0a:5b:63:f1:
1e:ca:36:8a:df:60:51:12:cb:1a:19:f6:38:15:75:79:fe:b5:
43:bb:48:1f:51:a6:ee:bf:01:38:38:ab:ca:a9:08:56:84:57:
85:33:f7:1c:18:a7:6e:47:1f:9a:55:42:f0:ed:b6:6f:c5:c4:
6e:ce:d5:b4:99:3f:11:23:e3:37:ef:de:f2:61:74:0a:c4:1c:
90:02:88:64:4e:88:b5:91:13:41:3f:a3:d9:93:d7:b9:16:dc:
25:cd:ff:66:c5:66:5e:be:64:20:11:e6:fc:31:68:fd:a6:41:
ff:35:c9:4b:09:13:b6:05:9c:d6:84:59:21:51:7d:2a:49:36:
df:5e:00:41:59:a8:fa:5c:f5:cd:ec:8b:72:46:16:fe:2b:b9:
42:28:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:26 2025 by rpki-client